$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer File: 296B5A42104756A14E2651E7EAC81D02EA0F7531.cer (raw, json) Hash identifier: WVvoABfHtkFYpmjAIttK1/VJGaVAbxDhOujqTjTsWsg= Subject key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1EA7ADB88EAD3799332AE7487FE709E3BF9E48F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft caRepository: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:33:14 +0000 Certificate not after: Wed 02 Apr 2025 18:38:14 +0000 Subordinate resources: AS: 270690 IP: 181.225.156.0/22 IP: 190.120.32.0/22 IP: 2804:6fe0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a7:ad:b8:8e:ad:37:99:33:2a:e7:48:7f:e7:09:e3:bf:9e:48:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:33:14 2024 GMT Not After : Apr 2 18:38:14 2025 GMT Subject: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:0d:12:0b:15:81:d6:36:42:af:cb:46:eb: 93:ba:a4:c1:9a:30:81:32:66:50:fa:ae:ad:43:6b: 14:82:4c:69:13:9a:99:8e:2e:0d:2e:9e:a3:88:a0: e6:15:18:5c:33:97:a4:66:d9:e2:a3:8a:3a:db:b2: 66:46:db:0f:0a:42:cb:4a:59:73:fe:f7:d2:50:91: 81:3e:31:9b:bb:b1:a8:0e:0d:2f:de:88:aa:6f:c1: 27:69:34:b9:26:d1:75:3c:9e:a9:30:53:05:7a:ac: c8:ef:d4:d5:47:50:b2:a9:90:cd:54:18:2a:c4:e0: 17:33:dc:20:6b:19:d4:3f:ba:f6:de:63:b7:33:72: 9a:3f:45:02:7d:3c:55:75:ed:dd:71:76:fc:59:3e: 9a:94:13:bc:75:e9:ce:33:63:2e:2c:b0:a7:86:b1: 6a:0e:c7:72:bb:29:b8:35:ca:e7:d0:b2:11:87:2e: 3e:75:ff:b3:8f:49:e3:32:7c:3b:fe:45:cd:88:4e: 94:28:fa:38:65:8b:8c:31:ff:0d:d1:55:83:85:b7: cc:33:bc:a0:2a:3e:86:90:eb:39:d1:e5:58:de:1c: 9a:1b:a2:fc:9c:b7:f9:4b:b6:63:d9:f9:ea:ad:35: cf:97:f3:8a:a0:1b:38:58:32:30:32:9e:0c:42:c9: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.225.156.0/22 190.120.32.0/22 IPv6: 2804:6fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270690 Signature Algorithm: sha256WithRSAEncryption 26:a5:58:cb:e1:1b:c7:57:b1:54:87:18:57:bf:f4:3f:71:c2: db:1d:d8:49:8e:73:8a:d5:61:ae:d2:bd:62:ec:54:51:e6:25: 57:e5:0d:e5:73:01:36:52:20:63:ae:c4:4f:29:83:5d:87:84: 02:ca:b4:4b:74:db:af:da:6b:39:1a:7e:c0:28:21:7a:85:e1: a2:99:ee:23:56:b1:95:7e:63:03:b1:9f:76:32:1d:0f:00:be: 21:4d:67:87:5e:0f:07:e4:99:98:ee:8c:bc:72:bb:75:a3:bc: 03:19:f0:da:49:7c:2e:d2:f5:23:ac:3d:74:70:cc:f5:2c:66: d6:5d:7a:34:92:1c:20:22:1d:e8:a2:f0:80:bd:d6:26:63:0e: 11:b5:03:ad:43:b1:35:4e:a6:50:7b:d9:aa:05:f8:c3:f0:4e: 82:3e:15:5f:ac:1f:75:34:5d:2e:f8:7c:11:fa:53:77:95:be: 5f:fd:6b:31:e6:2a:14:89:6d:a8:a6:fb:dd:8b:e8:d4:1e:f8: cc:87:82:04:92:d9:f9:a1:54:63:f3:a9:21:64:32:3b:c8:f4: 18:65:4b:ce:81:33:ff:7f:4c:92:c3:7d:ac:19:dc:9a:16:93: 71:5f:18:c6:75:71:71:a0:b5:7e:4b:7d:72:fb:31:26:65:fc: 32:6d:fc:fa -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHqetuI6tN5kzKudIf+cJ47+eSPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODMzMTRaFw0yNTA0MDIxODM4MTRaMDMxMTAvBgNV BAMTKDI5NkI1QTQyMTA0NzU2QTE0RTI2NTFFN0VBQzgxRDAyRUEwRjc1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oQ0SCxWB1jZCr8tG65O6pMGa MIEyZlD6rq1DaxSCTGkTmpmOLg0unqOIoOYVGFwzl6Rm2eKjijrbsmZG2w8KQstK WXP+99JQkYE+MZu7sagODS/eiKpvwSdpNLkm0XU8nqkwUwV6rMjv1NVHULKpkM1U GCrE4Bcz3CBrGdQ/uvbeY7czcpo/RQJ9PFV17d1xdvxZPpqUE7x16c4zYy4ssKeG sWoOx3K7Kbg1yufQshGHLj51/7OPSeMyfDv+Rc2ITpQo+jhli4wx/w3RVYOFt8wz vKAqPoaQ6znR5VjeHJobovyct/lLtmPZ+eqtNc+X84qgGzhYMjAyngxCyVMBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpa1pCEEdWoU4m UefqyB0C6g91MTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWo3 YTNObTFSaFNWSlAyc2czdEZhSmhNeEZObldhZ3I3OFQxbXB1dUMySGMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vq N2EzTm0xUmhTVkpQMnNnM3RGYUpoTXhGTm5XYWdyNzhUMW1wdXVDMkhjLzEvMjk2 QjVBNDIxMDQ3NTZBMTRFMjY1MUU3RUFDODFEMDJFQTBGNzUzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCteGcAwQCvnggMA0EAgACMAcDBQAoBG/gMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQhYjANBgkqhkiG9w0BAQsFAAOCAQEAJqVYy+Eb x1exVIcYV7/0P3HC2x3YSY5zitVhrtK9YuxUUeYlV+UN5XMBNlIgY67ETymDXYeE Asq0S3Tbr9prORp+wCgheoXhopnuI1axlX5jA7GfdjIdDwC+IU1nh14PB+SZmO6M vHK7daO8Axnw2kl8LtL1I6w9dHDM9Sxm1l16NJIcICId6KLwgL3WJmMOEbUDrUOx NU6mUHvZqgX4w/BOgj4VX6wfdTRdLvh8EfpTd5W+X/1rMeYqFIltqKb73Yvo1B74 zIeCBJLZ+aFUY/OpIWQyO8j0GGVLzoEz/39MksN9rBncmhaTcV8YxnVxcaC1fkt9 cvsxJmX8Mm38+g== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:27 2024 by rpki-client on console-fra.rpki-client.org